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*r#a» b^it s t * * * * y v—s##s £ „ 

y v—Srfeifrti-ST^-fe^jKy v—fE1g^©£ % 
iftfBT * -tr x # y v— ett^&Kfett * *bT \ * 5 7 * -fe 
x#y »c£<$i^T, ^gB^fe©T^ir^#{c*J-b-C 

mrl5<@A1fl«^cDT ^-fex sr^jp-rs^ y v 
lif*«2] mmrf-txtf}) v— isii^*5j;ot7Ky 

* -< - X <D If $ £ a ttt* fflffl-t 3 ^ n * is -y— /<< ftf c m 
^^ixTV>5, ff#«l{£iE«<Dtf^7*-fe;xfrJP3£ 
Bo 

fiJ/B £ * 5 BR ©if $8T * -fe ^ mm^mxh o T , 
BulEx- ^ x cd<@ Att$8l-*H- 5 T * -fe ;* Jt P£ £ 
^i-5fc*<DT^-feX3lfy v—5r. fufEflaAltfg©m 

*r#a»e>36i*f*»7-c, ffirfE^p =*v-y— ^iKHMfrf* 
t * -t x tK y v— gttjgpg t . 

Ddrv-y— ^F*l<DTi>-feX7Ky UT, ituffifl- 

* -fe x#©7 ^ -fe ^MtE&SrWSiJ-r £ 7 * -fe X # y V 

StfLfcr^t ^*BC3Wl ^TSfflS^gBT * ±*&\z 
M U T ffif&T*- x ft ©fi Alf * £fiJ/B £ it 5 T * 

^-fextfy ->-Kfc, ^SA^^-f-ST^-fe^^^T 
^-fex/u— yut LT^aL-fc/Ky v— -r-^»^BfjfEf@A 
tfr$S©£fpfi-#K J: SttT-^S Srf+^P LfcTK y «>— BEM» 
W^atciBigolf^T^-fexSij^it,, 

[0 0 0 1 1 

[$gg»i©JI1-5ftfl57>ij] ^IPJfl. x-^-x*© 

tit nr 9**mwsmz.f&*z. 

[0 0 0 2] 

[*£*©&#?] ft^-CD-i hV>&Rlzm^^ 



^LTT^-feXlWitffigi&oTV^, rci^^il 
AflWRfcov^tt. #SAfll«o0f^r#*AK:flMB^'9-f 

&<Dwm&m.Mt Littsim&mn\zt2-?xzx^z 0 
[ooo3] mA^m-mi-^nyj-f^-m^ 

[0004] U»>Ufe#e>« M©f-^-<-^->7f 
AT'f±, ^^<— X^CDT^-fe^ltPgWWatt, 7^— 

-x t f^^nTv>^<@AW#^M***A^. ieo 

If ^t-^-r5T^-fex«i|5S5r^ >- h o -/w-r?. J: 5 fc« 
^^ix-rv>/iv\ rcDfc*, <@Atf^©0fW#^ioT 
14^ ^-<5"<-x t f :, f-'^*tt5<BAtfS^^tcRLT 

5«AflMR&«ai-t-5*:*fc, ^S5Ktt<t ilffl;ftffia 5 A 
[0 0 0 5] 

[iswds^Lj;5 t-rs^jg] *&wn, &mb\c& 

*Ufc^@Alf«lc:>cti-5T^-fex«pgS:, f©fiAfS 
©Bf^^^AO^ifet-S-^v^T^ >- f«o-ywt5 rtSr 

[0006] 

*mm-t, ©Aits^^tp^-^-^-xsrt&^-rsiEtg 

?St, 7*-*-<-;*rt©<@Affi«K>it^5T^-fex*Si 
(S*IS;^-r5fc*(OT^-feXJKy v— Sr. fiAit^WF? 
*"#^6>Sl4f4*t5T^-feX#y v-SWfgt, T 9 
•fe^Tjf y V-Sf^STSWWfcT^-feXTKy v—S: 
*&^-t-^T^-feX5Ky v—E1t#Si, T^-fe^TKyv 
— fEtS3MS: $ tvT v ■> 5 T ^ -fe x y •> 
"C, ^^fc«T^-fex#tC*rUTl@A1f#--(DT^-fe 

[0007] 7^-fe;*#y ^-ctt^ajs^w 

-fe^*Jffli*Sf4, <BAtffia£^tp^-*^-x£tefc>rt- 

7^t^Lt< 5^T^-fex#tcyDdfv-y— ^5:^- 
UTflJffl^-erS^iS^T^-fex^^lfeT-fco-C. x 

- ^ -<-^ rtcoiB Atf«^*t-r t ^ -fexttpssr^rr 

5/tJ6©T^-fe^jKy V-Sr, <BA««©SfW#*»e>* 
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*y is-Mm®f%t. wsx LtcTf-zxmmzm^^x 

10 0 0 8] r^x, T?1ZX#!) >>-%:tt&\%x%:V 

*IPgSrT^-lr^/w— /w£ LX£«Lfc*Ky x— 
<@Af»#coFT^#ic«t2,a^-SiSSr^p Lfc#y V—5E 

tt, £^BIEi*tBfc*tt«*fc*ttStttt 
I0 0 0 9] 

•t. mxmn<omm^i. mnmrn^Mncx^x^ 

[0 0 1 O] fl-gBT^-fc^tt, ^7-YT>-h^7l52»C 
ioT-f^-^? I— colgfe^nTtEir&oX^S. ^ 

mm^m^-y-i-^^^^^-^xm^x^^. 

^-^^ai-Stt^v-^^tt, -fy?-^^ 
3£^LXlf«BFr^#iffi*l, ^7-<T>-h^*2, ^£ 
Wfdi©ffi5fe £ ?*— * co-"^ «? Wl V b Z. h & ^jm t & o 
X^3 0 

[0 0 1 1 ] tf^v-x^i^tt, i: t>, <@Atif$8 

tfc^v'^T'i-.Sr^tf^— ^f— 2, tn$8->^-£-4 
i-f^- h 3^(D^-^WAtb^lS:ff ^T'n^v' 

^ 4 3 (C'g•^i^TV^?,^HAt*«(c^-r5T^-^rx^tKS^ 
-fe * /v-— ^v-i^cDT^ir* /u— ;KD*t#> t & 5 <@ Alt 18 

[0 0 1 2] /Ky V-5E^*ffr&g|5 1 3Xftf&ZflZ# 

y v'-fE^tto-^jSria 3 (c^-t-,, #y ix- seb^»s 

1 £, •7 ? -^'<-^4 3 rt(DieAW«Sr#^-f- 
SfiA+f fB!&giJ5 2£. ffi&HWSSBl 2X i i : S£;Jl,£ 
^©T-Bf^t^^cim^^ 5 3 tfrhffi&ZthZo 

7^-t^^-^5 1, m Mimmq 5 2 . «^Hi£5 3 



14, ITU-T X. SOO^&Kg-^X. ^iT^ftS&BiJ^ i t 
XDNSrfit x. 5 -it* $ ix 5 » 
[0 0 13] T?±Xfr-;U5 ltt. fctxtt. ^§ST 

J&X&9. £coJ;5£«ttK#LX£cDJ;2&n-/w£ 
5 lco-^J?rlg|4{r^-r, 

[0 0 14] 04T*I4 > X h y*https://www.a.b 
/usr/local/apache/htdocs/subarea/'|Cjet't"5T^ - fe^. 

k^^bTf-kX/l'—Jl'&mi&LrzhOX-h&c Z<Df4 
V y "https://www. a. b/usr/local/apache/htdocs/s 
ubarea/'rtS, Att^S'J 5 2 £/£5„ 
[0 0 15] ro^J-Ctt, (if> <D (cond) ®T% 

r^-^^o^-r^m'&.u.mm <client#ac> tr^tL 

OV^Ttt, <then> ® T'^S^ixfc P — /^ifi^-k. 
S„ UttSEW^cOlai^i&'CLIENTttACftDNftO'jJS'Fujitsu, 
Ltd. 'IC-^r y^-^if *^og)5^'CLIENT#AaDN#0U* 
7)3 'Staff* * fc tt'NML' C7yfy ^-f* 5 N member 
(can#read, can#modify, canftdelete) h V 5 o — /V$r-^- 

x.5rirti-So ^©rtcj;^ m&mm&<Dim& 

[0016] Jlf y v— SEWS 5 1 Kmi-m* 
^a-|e:tt. 'POLICY CERTIFICATE' CD JS^lC, 'POLICY 
CERTIFICATE SIGNATURE'COffl|S:|S:tt, .toTPf 
$ tufcm^F^ coir - Sr g2Bi"5 . 

C^n^rV-y— ^ndr->-y-/<4 1 tt. flW®f*# 

$8*i?)>£>i£m£*tT< 5^y v-SEW^s^Sttf'ttt 
5dfy v—SW-gB4 4, #y v— sEP^»5cort$^IE« 
i"5 * y f-Ktt» 4 5, /Ky V-E«» 4 5 cort^l' 
£s-3\,^XTy--£?.$m&ftbXV *s— xVv ! y4 7 £ Sr 

[0017] y 3i>'v'^4 7 tt. # y v—gttgB 
4 4-CSl7#ttfc^y~>-HBJ»cort^Sr«MffL, jjfy 

9-t*%2<DTy-±*m&*M v )^Xtt#><D h 
iVi?V4 7 1 £, 3 rtco^— ^ 

7 = '<^gB4 7 5 y 

[0018] 1-7^ h^>-v5^4 7 i tt, ^Ky v— mm 

*5(c^*tb5T^-fe^/v-— /us l &M$r-fZ>tz)b<D/i' 

-^tmn 4 72, hut ?±*%<Dm i &*fmi-ztz- 
v>(ommmMVT&4 73, stt^s«?wgi5 4 7 3tt 

^L^gBT^-fex#(DJStti:/U-/w^fg64 7 2T» 
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[00 19] 9\-UT?±*%\±. f-;5"<-^4 3rt© 

m.mmt&7a*is-9— ^4K&«i-3 0 attars 

•5SttSrfEB^-f-St,<D-CfcoT, ITU-T X. 
tlcStfcf-^^fM^^ •»]*■* LTDWfctt 

[0 0 2 0] ^SiSEBJStt, *y V?-? i{C*5«t 5 
*AMfESrfT9t><D-CfooT, ITU-T X. 509<^g||i|EB^ 

-S^MSiSEWStt. SSL (Secure Sockets Layer) ^ 
fcliTSL (Transport Layer Security) t£ if Oi- iffS 
lEW WirTWffi^nS. r rT*#ABfI#ft£;fWU§ 
"oKlf± % Secure API (Application Program Interfac 
e) &mCXft&T?±X%2fabi£m£frX< 

a 4 7rt©h7^ hjc>-^V4 7 1 £ 

MVtU4 7 3 tdi^ff ^tt, -tO^-^ ^^(O^^^fT 
£tt3. 

[002 1] «ttSEK#W«3tW-^J4r0 7 K^-r. CI 
r.t?f±, ITU-T X. 509 Attribute Certificate b Lt£ 

/vt©M)5S:t8t5r ifci-oT, #y ^-lE51#ft 

^r^4 74m mteffintimn* 7 3 r-^tff bfc^ 

gBT^-fe^#WJSttt. /w-/H8W$64 7 2-CflWrLfc 

[002 2] gE#->*7 L ^.<!:CCM' V^ — 7W*SB4 7 
5 tf> <On-^)t^g64 7 6 li, # y v— Wmmftxm^ 

aSr^i-^tOT-fcoT, fcir^tf, OAOilpffiK&l 

fc*?ffi&<r>fe1®tek*. ^IS»cH-t-5<@AtW^co-^ 
UfcdSoT. n-/W^agB4 7 6^*3^T, T^i?*^ 

[0 02 3] 7?t^fi^ V* — 7^-f^gB4 7 7 
l±, ^S*J»v-^x^4 7 4 cD^J5£Lfcfl-S5T 
2«0o-^t s 0-/1^^4 7 6fflt5r- T'/v 



[0 0 2 4] ^fy/S 1 T'l±, <BA1t^©M##*>e> 

*y v-a»os*isa!>ofci»5*»sr*i9Ji-5. awm 
1 a^otk y ^-«»©s{+*HS*r3fcf? 

-T5„ ^fy^S 3-CI4. ^SCT^-ir^#2^?>ro-r- 
* -<—;*. 4 3^©7^t^ ^jfctfS jr> o fc. j&^^SrWJ-fr- 

^s^S^n^m-S. X^s/rS4TMi, 
-fe^/W— ;Hcl<3^T7^ -txftm&ftiX ? 54 
T> Y$b3L2\Z-1$L.X^—d"<—*4 3SrflIffl$-&5„ 
[002 5] [tK y ^-SflO <B Atf <fc 5 

9t*-t-. 7ryysi it?ii. it «Bff*#«* i 

^m^ix^^y v— SE9§«5Srgtttttt5 0 ^yv—|E 
W»5te, BffxgL-fcJ; 7?tX;W-A-5K j@A 
i*$6!£8ij 5 2 , m^-S^ 5 3*^ $ t> © t -T3 

[0 0 2 6] ^xj/^S 1 2-e(±„ ^gi&5 3 $:^fr 

m^S* 5 3§r«7ci-2>r t*5-c^5 o ^.^.y^s 
1 3 -Ctt. 5 3 ©rtSfc J: !> jEfcfcfcABBEa* 

* Sirfc*»5*»S:*l»Ji-«. fiASSE*siE«Jw/£$tbfc 
^•tcfix^-y^S l 3^=frU, «ABKK*»L.fc 

[0 0 2 7] ^yZfS 1 4-Ctt, V v—fiEW* 5 

©7?t^/^5 i o^wsrutT-rs, stf 
xELfcj; 5^T^-fe^/v-/w5 i zmAffimmn 5 2 i 

-Ctt, sHy v—!E^»5^btt(ilbfcT^-fe^/P-/V5 
1 Sr®A<t#SK8"J 5 2 b t hKtf y v — !ElSgB4 5 »c& 

[0 0 2 8] ^Ty/Sl 6T-f4. f@AfgSElC^B5cbfc 

5. 

lT?±Xfflffl) !8Xfy7S 4»C*5t^ST^i?^$lJ 
^KDSbf^lcoi/^TIll OtC^rTffiJ^IT'n-^^— h t N 
01 1 ^7B-ft- McS^v^T^i- 

S„ 

[0029] ■y-T'S 2 1 T*(4, SSL^ o h =i/WC«t 

i5»C x ^7^T^h^2(l!l*^-y— ^JC^LTT^ 
-t^»^SrliSUfcSSL^>'Kv'^'l'i5'S*^tT5. ^ 
tllZftfoVX^ D— ^(Bld^SSL/NV 
fT0Zb\Z£>) % ? 7 4 T ^hffijfc 2 b*)—/<b<D-t-y 
i/ay*m*LiTZ> a SSL^n ha/Kt"!;, ^ 
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<D®A&mZf$.$)l,tcWr&lzn x Secure API SrilCT 
:7*o 4 7©h77 7 1 rtlC^rcD 

«MWSj3«£;K*. flABSEfcffcHSc LfcStefctt. r<D 

[0 0 3 0] ^7 L v~fS 2 1 "Ctt* SSL/^ KVi-f £ 

5rtt>T?#, ^7^T>-hiS5fc2»^fcj£;b-CSSL/ 

3. ^f'/^S 2 UztS\,*X?7'(7i>' t-*83fe2 fcif— 
^ffli:Wfey->3 y«4Lfct^tli^ryys 2 2 

[00 3 1 ] 7ry^S2 3T'tt, ^7-T7yW*2 

7 -Y T V h SS* 2 g> AttfEHttP j&ff * tuT # fc. t H 

S2 4T'tt, Jgf£iEW#©#¥#r£tT5. ^7^T^h* 

ITU-T X. 509^mtc^m Lfcr— ^SCi -fZ> r t 

t\ IETF-PKIX SWfiW-t-^^-^^iri-S 

[0 0 3 2] ^r^yS2 5m JRtti£?B*5:fl?*T b 

t> A— /H$WgB4 7 2\zXr)m¥rL-tzT^±^^~^ 
<Oft®k&m>mmWxi'XTJ>.4 7 4lC<fco-C*ljS'JLT, 

tbtl5D-;Wi, 13-/^^4 7 6T^ft^^tb 

t \,x^^^T^bW^2\z^m^^ 0 m&f^, 

?7^7l/bi&3i2frt><07?±x%i$:\zMl,X, #l<9 
la T tvfc o -/H-ffi a 1" 3 T * ir ttPSri^Jt £ ft 

[00 33] ^f 5 '7S2 6m ^^T^ hiffi3fc2 



5. d^trtt, T^irxg#WfcofcfiAtiff&f&8'J5 2 
lc*tt- St-? 36*5*^- * ¥ t> v o - KR#fc f 

TV bi&3i2fribmm£ii>XZ1z.Wr£l^* s 
T-fTt-txmX&h'itcbmWiLXX'r-y-T'S 2 7 

[0 0 3 4] 2 7T?tt, fkUT 9 *%\zM 

Aif«ilS"J5 2«^J;oT#^$^5<BAtt#ro-gB*fc 
l44»*K**5r t©W -^T, l^Mi-Sr tropi- 
cal. &J^i-^rtWpl • ^pI^t*(DT^-fe:^$iJffil?rT 
^-fe^Wa-l'V^-7n'^gB4 7 7-CtfV\ fl-SBT^ 

[0 0 3 5] ^f-y7S2 8m HUT f-tx&frib 
(DT^ir^^Tbfc^A^WJ-t-S. ^7-fTVh 

tt. rrotoaSr^Ti-^o 
[0 0 3 6] 

•f £ gEffrox- * '<— * 2. <B AWS— ? -ir 

fiAl*«©B'f##*A^T^-fe^/V'-/v-t L 

•fe^ttPSW^JgiJtt, <@Ai*#»0f##*A^^ LfcT 
?±*si>-Mzm-3<h<DX'h*). *<DmWrv~S*y?* 

[mfficoffl^uiK] 

[01 ] *^^ro«tB&1»^Iil. 

[02] tt#HJr^#ffi5|5©lit!lg1ff^0o 

[0 3] y V-SEB^S(O«BS«^^^-rtft?^0« 

[0 4] tk y i'-mwm<o-m*7F'tmwm<, 

[0 5] 7"Pdrv-7"-^(D«»S«^0 o 

[0 6] 7*ndf-v"^— s«DWKmf&Elo 

[0 7] JRttKM*©-«SrSH1ftWBI. 

[0 8] ;<W(DW)tfF&ijiir7v—^ J r— bo 

[0 9] "9— ^fflllrot&ftSr^i-^n— h 0 

[010] *-/<ffi!l©Sj^Sr/T:i-7D-^-^- h„ 

[011] T^-feT.BttCiJttSx— ?7P- ^-V- h„ 
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-5 2 
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[El 8] 




4 1 

T 

.4 4 
.4 5 
A 7 



A 1 



1 2 



1 3 



I 4 



[19 6] 



, 4 7 1 

4 7 2 

4 7 3 

4 7 4 



4 7 5 

4 7 6 

4 7 7 

4 7 
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[IU4] 



IWil 0] 



BEGIN POLICY CERTIFICATE Y 

<directory https://wiw. a. b/usr/local/apache/htdocs/subarea/> s 2 j I ssl»> 1 
<if> i ' 

S2 2 f graKWgsg 



No 



<cond> 

X {CLIENT AC DN 0} eq * Fujitsu. Ltd* and 

X {CLIENT AC DN 0U> in {* Staff * ;* NML * } 
</cond> s 2 3 

<then> 

memberCcan read. can modify, can delete) 

</then> S2*\ mamrnmrn I 

</if> I 

S2 s | p-*«a j 

<di rectory > 

END POLICY CERTIFICATE 

BEGIN POLICY CERTIFICATE SIGNATURE s 2 b 

M 1 1 DNjCCAp+gAwl BAg 1 BATANBgkqhk i G9w OBAQQF ADCBqTELMAKGA 1 UEBhMCWFky 
FTAT BgN VBAgTDFNuYW t 1 1 ER 1 c2Vy dD ETMB EGA I UEBxNKU25ha2UgVG93b j EXMBUG Y «» 
AlUEChH0U25ha2UgT21sLCBIIdGQxH jAcBgNVBAsTFUNlcnRqZml jYXRl (EFldGhv s 2 ^ j t?*x«» | 
col0eTBVMBMGAlUEAxl0IU25ha2UgT2lslBNB«R4wHAYJKoZlhvcNAQkBFg9 YUBz " 
END POLICY CERTIFICATE SIGNATURE S2e \ n° 



[El 9 1 




, Y . 



SI 2 | ffrj^KSKfr 



S L 3 



S 1 4 




Ye s | j S 1 6 



S 1 5 | T*-bX*-*«Hft 
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[07] 

AttribuleCertif icate ::= SEQUENCE ( 

acinfo AttrlbuteCertificatelnfo. 
signs tureAl gori tha A Igor i thai den t i I i cr. 
signatureValue BIT STRING 

} 

AttribuleCertif icatelnfo SBQUENCE { 

version At tCertVersion DEFAULT vi. 

holder Holder, 
issuer At tCert issuer, 

signature A I gori thai dent if ier. 

seriaiNoaber Cert if icateSer ia lNuaber. 
attrCertValidi tyPeriod At tCertVal tdi tyPeriod. 
attributes SEQUENCE OF ar tribute. 
issuerUftiquelD Uni que idea 1 1 f i er OPTIONAL, 
extensions Extensions ORTIONAL 

) 

AttCertVersion = INTEGER I vl (0). v2CD) 

Holder :: \SBQUBNCE f l Uj|U|D [fl3 |s8||erSerial 08T!0NAL , 

— the issuer and serial number of 

— the holder's Public Key Certificate 
entityNaae [1] GeneralNaae ORTIONAL. 

— the naae of the claiaant or role 
objectDigestlnfo 12] ob Jec tDiges t I nf o ORTIONAL 

— if present* version aust be v2 

J 

objectDigestlnfo SEQUENCE 1 

digestedObjectType ENUMERATED I 

publicKey <0), 
publickeyCert <!)- 
otherDbjectTypes (2) } . 

— otherOb jectTypes UUST NOT 
— • UUST NOT be used in this profile 
otherObjectTypID OBJECT IDENTIFIER ORTIONAL. 
dlges tAlgori tha Al gori thai dent t f ier. 
ObjectDigest BIT STRING 

> 

AttCertlssuer CHOICE I 

oldFora General Nanes. 

neePora CO] SEQUENCE \ fl „ lftH11 
isstierNaae GeieralNaaes. ORTIONAL. 

baseCertif icateld CO] IssuerSerial ORTIONAL. 
objectDigestlnfo CI] Ob lee tDiges t Info ORTIONAL 

— at least one of IssuerNaae, baseCert i f ica t el d or — 

— objectDigestlnfo aust be present — 

— it oewFora is used, version aust be v2 

) 

IssuerSerial : SEQUENCE ( 

i ssuer General Naaes. 

serial Certif i ca t eSeriaNunbe r» 

issuerUID Dai quel dei t i f ier ORTIONAL 

) 

At tCertValidityPeriod SEQUBNCB I 

notBeforeTise Generali tedTiae. 
not Af terTime Genera 1 i zedTiae 

) 

Although the Attribute syntax is defined in CPXIXPR0F3 . we repeat 
the definition here for convenience. 

Attribute SEQUENCE { 

type At tribute type, 

values SET OF Attribute Value 
— at last one value is required — 

) 

Attributetype ::= OVJECT IDENTIFIER 
At triboteValue : := ANY 
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F* — 5B017 AA03 BA07 CA16 

5B075 KK43 KK54 KK63 UU08 
5B082 EA11 HA08 

5B085 AE13 AE23 AE29 BC01 BG07 
5B089 GA19 CB02 JB22 KA17 KB13 
KC58 
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